CVE-2024-33997
moodle: stored XSS risk when editing another user's equation in equation editor
Résumé
moodle: stored XSS risk when editing another user's equation in equation editor
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.10"},{"introduced":"4.2.0"},{"fixed":"4.2.7"},{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org